Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b6f38a1-a19d-37dd-8e40-e0aacee5ad17.roa
File: 8b6f38a1-a19d-37dd-8e40-e0aacee5ad17.roa (raw, json)
Hash identifier: HKs0pKGI3Ofttg4zqQyUj9Y/ZFA6aL6pQXo0AgxL3I0=
Subject key identifier: F9:EC:C9:14:1B:17:66:47:77:6C:0B:32:47:8D:56:1C:46:32:49:AF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DA3A49958D356807E6D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b6f38a1-a19d-37dd-8e40-e0aacee5ad17.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7015
IP address blocks: 96.124.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:a3:a4:99:58:d3:56:80:7e:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=1bc7c689-1db9-418d-b14e-70cd58f5c4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4e:d7:cb:f5:dd:0d:67:f4:e9:c0:db:44:79:
df:fe:b5:33:62:89:58:ce:fd:6e:93:1c:bb:31:7b:
bb:67:f7:63:33:ee:0f:a0:ee:cb:a0:22:e5:67:f6:
c5:cb:13:53:8c:32:e7:46:67:69:e8:58:ac:a8:a9:
d8:e1:6c:88:fd:ad:2e:e9:b7:e9:bd:8c:7b:16:32:
7d:47:c8:53:93:3a:d0:80:79:e5:82:0c:6e:4e:54:
5a:f1:7c:7d:54:d8:65:e0:ee:61:43:6e:c1:cf:97:
cd:95:fa:ca:62:cb:cd:5e:b5:0a:3c:69:67:1e:72:
9b:31:3e:ba:19:b9:dd:63:cc:42:67:09:49:37:1f:
de:d8:cf:cf:1a:76:03:36:0f:28:10:1b:42:bc:50:
3a:af:d0:be:9d:be:ae:87:50:9c:71:9f:67:fb:89:
3a:a0:b7:b0:73:58:e3:77:f7:f7:60:80:22:78:4b:
9a:d5:07:58:7d:9c:13:d9:58:a8:bb:b4:92:38:1e:
83:68:d1:29:87:61:4c:c6:a0:68:d3:dd:ca:33:6d:
57:bb:f5:26:5d:94:35:d6:17:24:7c:cd:39:57:e9:
da:e2:2d:78:b6:c4:68:81:c7:bf:99:8c:d0:5d:a9:
03:8c:4c:47:ff:23:21:01:20:8b:fd:12:94:64:d4:
69:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EC:C9:14:1B:17:66:47:77:6C:0B:32:47:8D:56:1C:46:32:49:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b6f38a1-a19d-37dd-8e40-e0aacee5ad17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.124.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:13:98:e5:0e:0e:b8:ca:a7:7f:13:25:85:8a:39:e1:ac:de:
d6:9a:32:d6:9a:9b:4f:59:01:88:e2:31:3c:ce:32:1c:10:78:
ec:d6:3c:de:7c:cc:b0:df:c0:db:81:c8:40:d1:b4:2c:8b:be:
d3:50:6a:7d:65:dd:3c:83:4a:44:8c:87:70:d8:87:e4:b3:e7:
e1:db:97:a6:ab:c2:52:c7:d1:35:9b:81:ed:13:d4:fb:5f:cd:
af:57:5c:95:f7:d4:22:08:c1:09:09:e1:66:c6:cc:f8:89:56:
fa:db:ad:d4:42:41:5f:f6:fd:78:50:ee:f7:b5:c0:c4:23:e0:
af:d9:09:99:f8:dc:27:d8:61:43:60:a7:c5:93:3e:c8:a6:f5:
90:91:b4:3a:4f:af:00:0f:0b:46:6b:38:a3:6f:93:03:d8:a1:
90:1d:2f:d4:b9:c5:c5:e2:42:50:53:f7:20:c5:2e:9f:c7:cc:
68:98:ec:42:7c:af:c0:af:aa:d3:5d:a8:91:4e:38:02:9e:a2:
9a:e5:33:71:4a:db:b8:da:bb:11:9a:68:2c:b4:52:ad:c4:88:
83:4c:ec:38:3a:c2:bf:b2:a7:a4:31:3a:18:27:0c:8d:44:ea:
e5:68:d8:d2:54:fe:88:4e:ea:a6:f0:a9:12:b5:c7:be:39:aa:
c6:7b:b2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:22 2025 by rpki-client